That is effectively "the full token". It is pretty difficult to sign the signatu... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		kevincox on June 12, 2023 \| parent \| context \| favorite \| on: Every Signature Is Broken: Insecurity of Microsoft... That is effectively "the full token". It is pretty difficult to sign the signature.

robertlagrant on June 12, 2023 [–]

It is, but that is the topic at hand:

> Signatures should really just be applied to whole files or data structures, everything else should be considered dangerous

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact